2665 matches found
CKFinder 2.3 / FCKEditor 2.6.8 SWF Cross Site Scripting
Hello The latest versions of CKFinder 2.3 and FCKEditor2.6.8 are accepting SWF as a valid extension. As a result, it is possible to make a website vulnerable to an XSS attack by uploading a malicious SWF file. Source: http://soroush.secproject.com/blog/2012/11/xss-by-uploadingincluding-a-swf-file...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which gi...
Adobe Flash Player Flash Plugin Cross-Domain Information Leak (APSB12-19; CVE-2012-4168)
A cross-domain information leak vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Flash Player while handling specially crafted .swf files. A remote attacker can exploit this issue by enticing a target user to open a malicious website containing a...
RHEL 5 / 6 : flash-plugin (RHSA-2012:1346)
The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:1346 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes several...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which gi...
CVE-2010-5263
Untrusted search path vulnerability in Sothink SWF Decompiler 6.0 Build 610 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .flv file. NOTE: some of these details are obtained from third part...
Design/Logic Flaw
Untrusted search path vulnerability in Sothink SWF Decompiler 6.0 Build 610 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .flv file. NOTE: some of these details are obtained from third part...
CVE-2010-5263
Untrusted search path vulnerability in Sothink SWF Decompiler 6.0 Build 610 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .flv file. NOTE: some of these details are obtained from third part...
CVE-2010-5263
CVE-2010-5263 affects Sothink SWF Decompiler 6.0 Build 610. The vulnerability is an untrusted search path issue that lets local users escalate privileges by placing a malicious dwmapi.dll in the current working directory, demonstrated by a directory containing a .flv file. This mirrors multiple v...
CVE-2010-5263: Undefined Security Weakness
Untrusted search path vulnerability in Sothink SWF Decompiler 6.0 Build 610 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .flv file. NOTE: some of these details are obtained from third part...
PT-2012-1473
Name of the Vulnerable Software and Affected Versions Sothink SWF Decompiler version 6.0 Build 610 Description The issue is related to an untrusted search path vulnerability. It allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. This can be...
Adobe Flash Player: Multiple vulnerabilities
Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple unspecified vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A...
Fedora Update for gnash FEDORA-2012-2617
Check for the Version of gnash OpenVAS Vulnerability Test Fedora Update for gnash FEDORA-2012-2617 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Fedora Update for gnash FEDORA-2012-3837
Check for the Version of gnash OpenVAS Vulnerability Test Fedora Update for gnash FEDORA-2012-3837 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Integer overflow
Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow...
CVE-2012-1175
Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow...
CVE-2012-1175
Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow...
CVE-2012-1175
Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow...
CVE-2012-1175
CVE-2012-1175 affects GNU Gnash 0.8.10. The vulnerability is in the GnashImage::size() function, where an integer overflow can trigger a heap-based buffer overflow via a crafted SWF file, enabling a remote attacker to cause a crash or potentially execute arbitrary code. Public advisories note pat...
